Skip to content
OpenAdvisories
High ICSA-25-352-04 1 CVE

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products

Published Dec 18, 2025 · Updated Dec 18, 2025

Vendor: Mitsubishi Electric Iconics Digital Solutions, Mitsubishi Electric Product: GENESIS64 Product: ICONICS Suite Product: MC Works64 Product: MobileHMI

Summary

Successful exploitation of this vulnerability could result in denial-of-service (DoS), information tampering, and information disclosure.

Vulnerabilities 1

  • High 8.2
    CVE-2025-11774

    Malicious Code Execution Vulnerability in the Software Keyboard Function of GENESIS64, ICONICS Suite, Mobile HMI, and MC Works64

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubi…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT

Revision history

  1. #1

    Initial Publication

References